Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a98e60bd-a6fa-34dc-bda6-0eeb88d0d319.roa
File: a98e60bd-a6fa-34dc-bda6-0eeb88d0d319.roa (raw, json)
Hash identifier: HB2pZ+gD0JsOX9zHho9tNvJfrPoAiOWj6F9Tiy7WH6I=
Subject key identifier: 5C:C4:4C:29:6D:AD:0E:4D:2A:A0:3E:1E:EB:A4:49:DC:0F:0D:F7:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C581840EAA3932E9B2C62780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a98e60bd-a6fa-34dc-bda6-0eeb88d0d319.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.116.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:84:0e:aa:39:32:e9:b2:c6:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3c24131d-6cdf-4aae-b344-126a66e424c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:83:a2:2e:89:a8:b9:32:2e:1c:c2:28:f7:
f0:60:b4:8f:3e:4e:9a:94:13:ad:b1:4e:f2:d3:a2:
6c:c3:21:1b:19:91:15:d3:39:8f:19:32:ab:38:ce:
20:08:cd:34:68:4d:32:66:b7:5a:58:70:58:ac:9f:
d8:37:16:ee:53:29:ac:06:41:87:e6:62:f6:2d:49:
56:73:23:88:5c:8a:7a:99:7e:e5:5e:83:27:41:7c:
8d:cc:7d:85:5d:c1:e1:93:10:c2:ab:90:cf:ee:af:
43:83:f6:3d:c7:3c:83:69:e3:8a:a0:c9:d2:77:ee:
da:7c:54:31:ba:0d:a9:29:58:74:7f:93:d1:49:ed:
0f:66:c8:df:d0:21:da:93:33:1a:83:89:d2:f4:de:
da:0d:28:e3:d8:fb:6a:04:03:1b:0d:8a:09:cf:d3:
08:b7:fc:c1:3d:6d:48:5f:8f:cb:c0:07:7c:65:7b:
52:af:62:ab:bc:1f:58:f9:db:88:77:08:cd:84:1c:
99:b0:0f:be:e6:12:87:4e:82:cb:dc:5d:28:a3:3a:
a9:53:f1:d7:7f:a7:a6:54:e5:3e:96:cd:bd:fe:02:
b8:9a:ab:0c:5e:d4:cf:83:94:9b:b0:7e:90:8d:d5:
37:48:24:d5:fd:e7:d9:79:a5:65:1a:67:77:80:4a:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:4C:29:6D:AD:0E:4D:2A:A0:3E:1E:EB:A4:49:DC:0F:0D:F7:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a98e60bd-a6fa-34dc-bda6-0eeb88d0d319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ff:42:d5:30:76:ff:87:3e:ab:e4:98:cd:d6:a0:9d:65:5c:
74:7c:3a:85:28:a1:8c:96:21:8a:e3:92:00:7a:2b:10:6e:55:
37:59:07:91:0f:f2:bf:ce:ed:a0:6f:46:76:1b:d3:a4:82:ed:
2f:d1:50:82:26:72:e4:fb:29:45:8d:12:ea:c7:ab:4b:62:89:
07:5a:bf:ee:6f:c2:c1:24:3b:32:63:85:41:d9:09:3c:e7:6f:
e3:ff:9b:79:61:b2:f4:c0:55:2f:8e:dd:2c:62:09:31:a0:57:
88:09:08:21:6d:74:bf:e5:44:77:26:68:c5:ca:bb:14:6e:e8:
37:cc:92:7c:cb:23:b4:b2:df:87:59:8d:b2:8d:82:e9:84:42:
f6:7a:d8:d1:8b:3a:ee:4b:10:19:27:22:25:a4:e9:41:42:ca:
c7:61:49:cb:97:46:30:7d:55:2e:87:75:5c:81:a7:74:b8:4a:
c8:26:dd:e4:4f:b2:83:b6:01:0c:6a:b9:f8:28:61:30:88:00:
81:f5:55:f2:c7:08:71:49:f3:23:87:e6:22:73:6b:4f:ae:e4:
37:bb:50:9f:42:af:99:48:cb:92:e1:92:0c:ca:9c:a3:b5:97:
f7:60:8b:58:26:a5:8b:c2:4c:e1:7c:22:5c:dc:d5:e4:10:ba:
c6:8a:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:13 2025 by rpki-client